Python rizzo

Storm Shadow

Administrator
Staff member
Developer
Ida Pro Expert
Elite Cracker
rizzo.py

Features

Identifies and re-names functions between two or more IDBs based on:
  • Formal signatures (i.e., exact function signatures)
  • References to unique string
  • References to unique constants
  • Fuzzy signatures (i.e., similar function signatures)
  • Call graphs (e.g., identification by association)
Usage

To generate signatures for functions in your current IDB:

To apply generated signatures to your current IDB:

Some pre-generated signatures are provided in the included sub-directories.
Installation

Just copy rizzo.py into your IDA plugins directory.
ode-signature-plugin-for-ida/


https://github.com/devttys0/ida/tree/master/plugins/rizzo

ALSO READ THIS THREAD
http://www.devttys0.com/2014/10/a-code-signature-plugin-for-ida/
 
Top